Search Vulnerabilities

Anviz Products Download of Code Without Integrity Check

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege...

Axios npm Supply Chain Incident Impacting @usebruno/cli

TrueConf Client Update Integrity Verification Bypass

FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml

ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM

Changing｜IDExpert Windows Logon Agent - Remote Code Execution

Changing｜IDExpert Windows Logon Agent - Remote Code Execution

Unsigned upgrade package

MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

Missing Firmware Authenticity Checks in Solax Power Pocket WiFi models

SumatraPDF Update MITM -> Arbitrary Code Execution

Cisco Secure Web Appliance TBD Bypass Vulnerability

Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

Gradle fails to disable repositories which can expose builds to malicious artifacts

pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies

ChurchCRM vulnerable to RCE with database restore functionality

Improper server-side validation in ScreenConnect extension framework